MyGit

v0.53.8

tektoncd/pipeline

版本发布时间: 2024-08-06 19:39:50

tektoncd/pipeline最新发布版本:v0.63.0(2024-08-31 02:58:24)

-Docs @ v0.53.8 -Examples @ v0.53.8

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.8/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.8/release.yaml
REKOR_UUID=24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.53.8@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

Perform matrix results validation on only result ref params

mproved error handling for some invalid result reference scenarios.

leanup resolved object before attempting to validate it through api dry-run call

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.53.8!

Extra shout-out for awesome release notes:

相关地址:原始地址 下载(tar) 下载(zip)

1、 release.notags.yaml 125.35KB

2、 release.yaml 125.42KB

查看:2024-08-06发行的版本